Managed hardened phones and clean travel devices for high-risk professionals
TL;DR Sparrowline sets up and looks after locked-down phones for people likely to be targeted by spyware - journalists, lawyers, deal teams and senior executives. It uses mainstream phones with their strongest settings, lends clean devices for risky trips and runs a desk that responds to threat alerts. Firms pay a monthly fee per person.
Targeted phone attacks in India are documented, not hypothetical. Amnesty's forensic work found commercial spyware traces on the phones of two senior journalists in 2023. One was sent a zero-click exploit over a built-in messaging app, and more than 20 Indian journalists and opposition politicians reportedly received threat warnings from their phone maker in October 2023[1].
So what do you do when that warning lands on your phone? Most people have no one to call. Corporate IT teams manage laptops for productivity, not phones against state-grade spyware. Law firms and deal teams carry price-sensitive information on personal phones, often with no hardening at all.
The seed proposed custom tamper-proof devices on an isolated network, and I reframed it. A new phone needs years of hardware work and Indian radio and safety approvals, and a closed network is useless when your contacts aren't on it.
Sparrowline uses phones people already trust. Each client gets a mainstream phone with its maker's lockdown setting switched on[2] or one running a non-profit hardened open-source system[3], depending on what they need. Sparrowline configures it, trims apps, sets up separate accounts and teaches the person to live with the restrictions.
For trips abroad or sensitive meetings, clients borrow a clean phone and laptop, which are wiped and checked on return. A small desk answers when someone gets a threat notification, takes the phone out of use and arranges forensic checks with specialist partners. Not everything is hunky-dory though - the lockdown setting blocks device management enrolment[2], so the service relies on hands-on checks rather than remote control.
Payers are firms rather than individuals - law firms, investment banks and private equity teams, newsrooms and family offices. Some people will pay for themselves. A hardened phone costs what the base phone costs, and one US privacy phone with hardware kill switches starts at $799 (about ₹77,000)[4]. My estimate for Sparrowline is ₹4,000–12,000 a month per person, plus device costs.
The 2023 Amnesty findings and the phone maker's threat notifications made the risk public in India[1]. The phone maker added its lockdown setting as a built-in option for people who might be personally targeted[2], and the hardened open-source system has matured into a usable daily system[3]. The tools exist now. What's missing is someone to set them up and stand behind them.
I found no public figure for spending on secure mobile services in India. The narrowest firm signal is the one wave of phone-maker warnings to more than 20 Indian journalists and politicians in October 2023[1]. That is small, so the paying market has to come from firms protecting deals and clients, and nobody has measured that yet.
One US maker sells a privacy-focused phone with physical switches for radios, microphone and camera[4]. The hardened open-source system is free to install on supported phones[3]. Digital-security charities help some journalists after an alert.
I didn't find an Indian firm offering a managed, paid hardened-phone service with loaner devices, so confirm this before you start.
| Difficulty | Moderate (41/100) |
| Starting capital | ₹40–80 L |
| Time to launch | 4–6 months |
The technology is off the shelf. The hard part is trust and discretion, because clients are touchy about who knows they're at risk. Running device custody, wipes and checks without errors takes discipline, and you also need forensic partners you can call fast.
No special licence, as long as you stick to phones already sold in India. Beyond that, it's the baseline.
Building this outside India? The categories above usually have a local equivalent, so check with your own regulator.
Don't trust AI to decide whether a phone has been compromised. That call belongs to the forensic partners.
Want to work out the AI layer for Sparrowline? Talk to Yash →
Here's what can go south -
I think this is a sensible services business for a founder with incident-response or digital-security experience and a network among lawyers or bankers. If you want to build hardware then look elsewhere. Before you invest, sign ten paying individuals through two firms and check how many still use the hardened setup after 60 days.
Plan for roughly ₹40–80 L, mostly for a pool of travel devices, a small response desk and early sales to firms.
Not if you resell phones already sold here. You need the usual company registration, GST and DPDP compliance, and BIS and WPC approvals only for imported devices.
Yes, since these phone protections work anywhere. Check local device import rules, data protection law and what forensic work you're allowed to do.
The free Sparrowline validation kit has the line-by-line capital breakdown, the effort scoring, the device and data-protection checklist, a 14-day validation sprint with pass/fail targets, a 90-day launch plan, 10 interview questions for firms and at-risk professionals, and 5 assumptions to test. Download the kit →
Thinking about building Sparrowline or something close to it? The make-or-break work is earning the trust of people who cannot afford a leak. If you need a hand, you know where to find me. Talk to Yash →
For illustration only. Names are fictional and ideas hypothetical; sourced facts are real but may be out of date. Nothing here is legal, financial or professional advice, and Yash Khatri is not personally liable for any use of it. Read the full disclaimer.